今日样本2个

显示全部楼层 · 发表于 2008-11-18 21:09:08

大家自己看了

显示全部楼层 · 发表于 2008-11-18 21:21:13

Begin scan in 'D:\unp220380956.rar'
D:\unp220380956.rar
[0] Archive type: RAR
--> unp220380956.tmp
   [DETECTION] Contains recognition pattern of the HTML/Malicious.ActiveX.Gen HTML script virus
[NOTE]    A backup was created as '4992c127.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
v.rar 上报

显示全部楼层 · 发表于 2008-11-18 21:24:12

第一个ESS飘过，第二个没测

显示全部楼层 · 发表于 2008-11-18 21:24:24

过nod32

显示全部楼层 · 发表于 2008-11-18 21:24:49

File ID ?Filename Size (Byte) Result
25131866  v.rar 305.59 KB OK

A listing of files contained inside archives alongside their results can be found below:

File ID ?Filename Size (Byte) Result
25131867  97gan.exe  313.94 KB  CLEAN

Please find a detailed report concerning each individual sample below:

?Filename Result
97gan.exe  CLEAN

The file '97gan.exe' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.

显示全部楼层 · 发表于 2008-11-18 21:24:53

Macfee一个都没有报阿

显示全部楼层 · 发表于 2008-11-18 23:08:43

To KL

显示全部楼层 · 发表于 2008-11-19 00:46:27

也过挪吨2009

显示全部楼层 · 发表于 2008-11-19 01:26:03

Hello,

97gan.exe_

No malicious code was found in this file.

unp220380956.tmp_ - Trojan-Downloader.HTML.IFrame.uz

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Ostroverkhov Vladimir
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

显示全部楼层 · 发表于 2008-11-19 07:16:22

第一个可能要打开网站了才知道，应为第一个EXE是三个地址的合级编辑，三个地址都是病毒的下载地址。

[病毒样本] 今日样本2个

本帖子中包含更多资源

提示大家一下

浏览过的版块